I have completed a couple of projects recently migrating customers from Symantec Endpoint Protection v11.0 to v12.1, including moving to a new SEP Manager. In these projects, the decision was made to do a fresh install of the SEPM, and move the clients into the new manager, without using replication between the old and new SEPM.
The file on the SEP v11 client called Sylink.xml tells the client which server to connect to, what the server certificate is and which group the client should join on the SEPM (among other things).
There is a tool on the SEP media part 2 in Tools\SylinkDrop.exe which can be used to swap the Sylink.xml file on the SEP client.
During these projects I was looking for a way to simplify the creation of the sylink.xml file, the projects both involved a large number of client groups – I didnt really want to manually export the communication settings for over 30 groups!
This lead me on a powershell path of discovery, and the realisation that powershell could load an xml file as a data object, manipulate it, and then write it out! This was exactly what I needed.
The process I used to generate the sylink files was: – Create the group structure in the SEPM – Create a groups.txt file: this file had a list of SEP client groups per line – export a sylink.xml file from the destination SEPM: for example, download the communication settings file from the “My Company” top level group. – run the update_sylink.ps1 powershell script – deploy the sylink files to the SEP agents with SylinkDrop.exe
The groups.txt file contained lines like: My Company\Desktops My Company\Desktops\WA My Company\Desktops\NSW My Company\Desktops\NT My Company\Desktops\QLD My Company\Desktops\SA My Company\Desktops\TAS My Company\Desktops\VIC
Note that SEP is case sensitive – the groups.txt file must match the group names in the SEPM.